eap7-netty-transport-native-unix-common vulnerabilities (Red Hat)
91 vulnerabilities.
eap7-netty-transport-native-unix-commonRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-netty-transport-native-unix-commonRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-netty-transport-native-unix-commonRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-netty-transport-native-unix-commonRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-netty-transport-native-unix-commonRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-netty-transport-native-unix-commonRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-netty-transport-native-unix-commonRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-netty-transport-native-unix-commonRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-netty-transport-native-unix-commonRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-netty-transport-native-unix-commonRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-netty-transport-native-unix-commonRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-netty-transport-native-unix-commonRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-netty-transport-native-unix-commonRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-netty-transport-native-unix-commonRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-netty-transport-native-unix-commonRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-netty-transport-native-unix-commonRed HatInsecure Temporary File in RESTEasy5.5 Mediumeap7-netty-transport-native-unix-commonRed HatApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider5.5 Mediumeap7-netty-transport-native-unix-commonRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-netty-transport-native-unix-commonRed HatRemote Code execution in SnakeYAML8.3 Higheap7-netty-transport-native-unix-commonRed HatStack Overflow in Snakeyaml5.8 Mediumeap7-netty-transport-native-unix-commonRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-netty-transport-native-unix-commonRed HatDoS in SnakeYAML6.5 Mediumeap7-netty-transport-native-unix-commonRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-netty-transport-native-unix-commonRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-netty-transport-native-unix-commonRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-netty-transport-native-unix-commonRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-netty-transport-native-unix-commonRed HatDeserialization of Untrusted Data7.7 Higheap7-netty-transport-native-unix-commonRed HatPath Traversal in Moment.js7.5 Higheap7-netty-transport-native-unix-commonRed HatPrototype Pollution in minimist9.8 Criticaleap7-netty-transport-native-unix-commonRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-netty-transport-native-unix-commonRed HatDeeply nested json in jackson-databind7.5 Higheap7-netty-transport-native-unix-commonRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-netty-transport-native-unix-commonRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-netty-transport-native-unix-commonRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-netty-transport-native-unix-commonRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-netty-transport-native-unix-commonRed HatRCE in H2 Console9.8 Criticaleap7-netty-transport-native-unix-commonRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-netty-transport-native-unix-commonRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 Higheap7-netty-transport-native-unix-commonRed HatBzip2Decoder doesn't allow setting size restrictions for decompressed data7.5 High